Disclosed by embodiments of the present application are a network access method used for an edge router and an edge router. One specific embodiment of the method comprises: receiving a first request message sent by a first tenant network edge device among at least one tenant network edge device; on the basis of port information of a port connected to the first tenant network edge device, obtaining a first request identification corresponding to the first tenant network edge device, wherein the first request identification is used to identify the first tenant network edge device; adding the first request identification to the first request message so as to generate a processed first request message; and on the basis of a stored routing table, forwarding the processed first request message to a cloud gateway.
|
1. A network access method for an edge router, the edge router being in communication connection with a cloud gateway and at least one tenant network edge device, the method comprising:
receiving a first request message sent by a first tenant network edge device of the at least one tenant network edge device;
acquiring a first request identifier corresponding to the first tenant network edge device based on port information of a port connected to the first tenant network edge device, the first request identifier being used to identify the first tenant network edge device;
adding the first request identifier to the first request message to generate a processed first request message; and
forwarding the processed first request message to the cloud gateway, based on a stored routing table,
wherein acquiring a first request identifier corresponding to the first tenant network edge device based on port information of a port connected to the first tenant network edge device comprises:
identifying the first tenant network edge device based on the port information of the port connected to the first tenant network edge device; and
sending a request to the cloud gateway to acquire the first request identifier corresponding to the first tenant network edge device.
9. A non-transitory computer readable medium, storing a computer program thereon, the program, when executed by a processor, causes the processor to implement a method for an edge router, the edge router being in communication connection with a cloud gateway and at least one tenant network edge device, the method comprising:
receiving a first request message sent by a first tenant network edge device of the at least one tenant network edge device;
acquiring a first request identifier corresponding to the first tenant network edge device based on port information of a port connected to the first tenant network edge device, the first request identifier being used to identify the first tenant network edge device;
adding the first request identifier to the first request message to generate a processed first request message; and
forwarding the processed first request message to the cloud gateway, based on a stored routing table,
wherein acquiring a first request identifier corresponding to the first tenant network edge device based on port information of a port connected to the first tenant network edge device comprises:
identifying the first tenant network edge device based on the port information of the port connected to the first tenant network edge device; and
sending a request to the cloud gateway to acquire the first request identifier corresponding to the first tenant network edge device.
5. A network access apparatus in an edge router, the edge router being in communication connection with a cloud gateway and at least one tenant network edge device, the apparatus comprising:
at least one processor; and
a memory storing instructions, wherein the instructions when executed by the at least one processor, cause the at least one processor to perform operations, the operations comprising:
receiving a first request message sent by a first tenant network edge device of the at least one tenant network edge device;
acquiring a first request identifier corresponding to the first tenant network edge device based on port information of a port connected to the first tenant network edge device, the first request identifier being used to identify the first tenant network edge device;
adding the first request identifier to the first request message to generate a processed first request message; and
forwarding the processed first request message to the cloud gateway, based on a stored routing table,
wherein acquiring a first request identifier corresponding to the first tenant network edge device based on port information of a port connected to the first tenant network edge device comprises:
identifying the first tenant network edge device based on the port information of the port connected to the first tenant network edge device; and
sending a request to the cloud gateway to acquire the first request identifier corresponding to the first tenant network edge device.
2. The method according to
receiving a first response message sent by the cloud gateway in response to the first request message, wherein the first response message comprises a first response identifier, and the first response identifier is used to identify the first tenant network edge device;
removing the first response identifier for the first response message to generate a processed first response message; and
forwarding the processed first response message to the first tenant network edge device, based on the port information.
3. The method according to
receiving an intermediate message sent by the access switch, wherein the intermediate message comprises a second tenant identifier and a second request message received by the access switch from the second tenant network edge device, and the second tenant identifier is used to identify the second tenant network edge device;
acquiring a second request identifier corresponding to the second tenant network edge device based on the second tenant identifier;
adding the second request identifier to the intermediate message, and removing the second tenant identifier, to generate a processed intermediate message; and
forwarding the processed intermediate message to the cloud gateway, based on the routing table.
4. The method according to
receiving a second response message sent by the cloud gateway in response to the second request message, wherein the second response message comprises a second response identifier, and the second response identifier is used to identify the second tenant network edge device;
acquiring the second tenant identifier corresponding to the second tenant network edge device based on the second response identifier;
removing the second response identifier for the second response message, and adding the second tenant identifier, to generate a processed second response message; and
forwarding the processed second response message to the access switch, based on the routing table.
6. The apparatus according to
receiving a first response message sent by the cloud gateway in response to the first request message, wherein the first response message comprises a first response identifier, and the first response identifier is used to identify the first tenant network edge device;
removing the first response identifier for the first response message to generate a processed first response message; and
forwarding the processed first response message to the first tenant network edge device, based on the port information.
7. The apparatus according to
receiving an intermediate message sent by the access switch, wherein the intermediate message comprises a second tenant identifier and a second request message received by the access switch from the second tenant network edge device, and the second tenant identifier is used to identify the second tenant network edge device;
acquiring a second request identifier corresponding to the second tenant network edge device based on the second tenant identifier;
adding the second request identifier to the intermediate message, and removing the second tenant identifier, to generate a processed intermediate message; and
forwarding the processed intermediate message to the cloud gateway, based on the routing table.
8. The apparatus according to
receiving a second response message sent by the cloud gateway in response to the second request message, wherein the second response message comprises a second response identifier, and the second response identifier is used to identify the second tenant network edge device;
acquiring the second tenant identifier corresponding to the second tenant network edge device based on the second response identifier;
removing the second response identifier for the second response message, and adding the second tenant identifier, to generate a processed second response message; and
forwarding the processed second response message to the access switch, based on the routing table.
10. The non-transitory computer readable medium according to
receiving a first response message sent by the cloud gateway in response to the first request message, wherein the first response message comprises a first response identifier, and the first response identifier is used to identify the first tenant network edge device;
removing the first response identifier for the first response message to generate a processed first response message; and
forwarding the processed first response message to the first tenant network edge device, based on the port information.
11. The non-transitory computer readable medium according to
receiving an intermediate message sent by the access switch, wherein the intermediate message comprises a second tenant identifier and a second request message received by the access switch from the second tenant network edge device, and the second tenant identifier is used to identify the second tenant network edge device;
acquiring a second request identifier corresponding to the second tenant network edge device based on the second tenant identifier;
adding the second request identifier to the intermediate message, and removing the second tenant identifier, to generate a processed intermediate message; and
forwarding the processed intermediate message to the cloud gateway, based on the routing table.
12. The non-transitory computer readable medium according to
receiving a second response message sent by the cloud gateway in response to the second request message, wherein the second response message comprises a second response identifier, and the second response identifier is used to identify the second tenant network edge device;
acquiring the second tenant identifier corresponding to the second tenant network edge device based on the second response identifier;
removing the second response identifier for the second response message, and adding the second tenant identifier, to generate a processed second response message; and
forwarding the processed second response message to the access switch, based on the routing table.
|
The present application is a U.S. National Phase Application under 35 U.S.C. 371 of International Application No. PCT/CN2019/084639 filed Apr. 26, 2019, which claims priority to Chinese Patent Application No. 201810401697.1 filed on. Apr. 28, 2018 by the applicants BEIJING JINGDONG SHANGKE INFORMATION TECHNOLOGY CO., LTD., and BEIJING JINGDONG CENTURY TRADING CO., LTD., and titled “Network access method and device for edge router”, the entire contents of which are herein incorporated by reference.
Embodiments of the present disclosure relate to the field of computer technology, and specifically to a network access method and apparatus for an edge router.
With the rise of cloud computing, many enterprise users choose to rent public cloud services for new demands. However, enterprises originally maintain a large amount of infrastructure. Therefore, it is necessary to realize the network connection between a cloud network rented by an enterprise user and its existing infrastructure.
Embodiments of the present disclosure provide a network access method and apparatus for an edge router.
In a first aspect, an embodiment of the present disclosure provides a network access method for an edge router, the edge router being in communication connection with a cloud gateway and at least one tenant network edge device, the method including: receiving a first request message sent by a first tenant network edge device in the at least one tenant network edge device; acquiring a first request identifier corresponding to the first tenant network edge device based on port information of a port connected to the first tenant network edge device, the first request identifier being used to identify the first tenant network edge device; adding the first request identifier to the first request message to generate a processed first request message; and forwarding the processed first request message to the cloud gateway, based on a stored routing table.
In some embodiments, receiving a first response message sent by the cloud gateway in response to the first request message, where the first response message includes a first response identifier, and the first response identifier is used to identify the first tenant network edge device; removing the first response identifier for the first response message to generate a processed first response message; and forwarding the processed first response message to the first tenant network edge device, based on the port information.
In some embodiments, the edge router is in communication connection with an access switch, and the access switch is in communication connection with a second tenant network edge device of the at least one tenant network edge device, and the method further includes: receiving an intermediate message sent by the access switch, wherein the intermediate message comprises a second tenant identifier and a second request message received by the access switch from the second tenant network edge device, and the second tenant identifier is used to identify the second tenant network edge device; acquiring a second request identifier corresponding to the second tenant network edge device based on the second tenant identifier; adding the second request identifier to the intermediate message, and removing the second tenant identifier, to generate a processed intermediate message; and forwarding the processed intermediate message to the cloud gateway, based on the routing table.
In some embodiments, receiving a second response message sent by the cloud gateway in response to the second request message, where the second response message includes a second response identifier, and the second response identifier is used to identify the second tenant network edge device; acquiring the second tenant identifier corresponding to the second tenant network edge device based on the second response identifier; removing the second response identifier for the second response message, and adding the second tenant identifier, to generate a processed second response message; and forwarding the processed second response message to the access switch, based on the routing table.
In a second aspect, an embodiment of the present disclosure provides a network access apparatus for an edge router, the edge router being in communication connection with a cloud gateway and at least one tenant network edge device, the apparatus including: a first request message receiving unit, configured to receive a first request message sent by a first tenant network edge device in the at least one tenant network edge device; a first request identifier acquisition unit, configured to acquire a first request identifier corresponding to the first tenant network edge device based on port information of a port connected to the first tenant network edge device, the first request identifier being used to identify the first tenant network edge device; a first request message processing unit, configured to add the first request identifier to the first request message to generate a processed first request message; and a first request message forwarding unit, configured to forward the processed first request message to the cloud gateway, based on a stored routing table.
In some embodiments, the apparatus further includes: a first response message receiving unit, configured to receive a first response message sent by the cloud gateway in response to the first request message, wherein the first response message comprises a first response identifier, and the first response identifier is used to identify the first tenant network edge device; a first response message processing unit, configured to remove the first response identifier for the first response message to generate a processed first response message; and a first response message forwarding unit, configured to forward the processed first response message to the first tenant network edge device, based on the port information.
In some embodiments, the edge router is in communication connection with an access switch, and the access switch is in communication connection with a second tenant network edge device of the at least one tenant network edge device, and the apparatus further includes: an intermediate message receiving unit, configured to receive an intermediate message sent by the access switch, where the intermediate message comprises a second tenant identifier and a second request message received by the access switch from the second tenant network edge device, and the second tenant identifier is used to identify the second tenant network edge device; a second request identifier acquisition unit, configured to acquire a second request identifier corresponding to the second tenant network edge device based on the second tenant identifier; an intermediate message processing unit, configured to add the second request identifier to the intermediate message, and remove the second tenant identifier, to generate a processed intermediate message; and an intermediate message forwarding unit, configured to forward the processed intermediate message to the cloud gateway, based on the routing table.
In some embodiments, the apparatus further includes: a second response message receiving unit, configured to receive a second response message sent by the cloud gateway in response to the second request message, wherein the second response message comprises a second response identifier, and the second response identifier is used to identify the second tenant network edge device; a second tenant identifier acquisition unit, configured to acquire the second tenant identifier corresponding to the second tenant network edge device based on the second response identifier; a second response message processing unit, configured to remove the second response identifier for the second response message, add the second tenant identifier, to generate a processed second response message; and a second response message forwarding unit, configured to forward the processed second response message to the access switch, based on the routing table.
In a third aspect, an embodiment of the present disclosure provides a electronic device, including: one or more processors; and a storage apparatus, storing one or more programs thereon; and where the one or more programs, when executed by the one or more processors, cause the one or more processors to implement the method according to any implementation in the first aspect.
In a fourth aspect, an embodiment of the present disclosure provides a computer readable medium, storing a computer program thereon, where the program, when executed by a processor, implements the method according to any implementation in the first aspect.
The network access method and apparatus for an edge router provided by embodiments of the present disclosure, by identifying a connection port with the first tenant network edge device, acquiring the first request identifier corresponding to the first tenant network edge device and adding a first identifier to the first request message sent by the first tenant network edge device, and then forwarding the processed first request message to the cloud gateway, thus network connection between the first tenant network edge device and the cloud gateway is realized, and the port information of the port connected to the edge router is used in the data transmission process. The first request identifier enables the edge router to identify the first tenant network edge device, thereby helping to realize isolation and safety of the data transmission process of the first tenant network edge device.
After reading detailed descriptions of non-limiting embodiments with reference to the following accompanying drawings, other features, objectives and advantages of the present disclosure will become more apparent.
The present disclosure will be further described below in detail in combination with the accompanying drawings and embodiments. It may be appreciated that the specific embodiments described herein are merely used for explaining the relevant disclosure, rather than limiting the disclosure. In addition, it should be noted that, for the ease of description, only the parts related to the relevant disclosure are shown in the accompanying drawings.
It should be noted that embodiments in the present disclosure and the features in the embodiments may be combined with each other on a non-conflict basis. The present disclosure will be described below in detail with reference to the accompanying drawings and in combination with the embodiments.
As shown in
Tenant A, tenant B, and tenant C may rent cloud resources provided by cloud service provider D. Tenant A, tenant B, and tenant C may be individuals, enterprises, colleges, government departments, hotels, or other telecommunications operators. Cloud service provider D may provide tenant A, tenant B, and tenant C with various hardware, software and other system resources.
The infrastructures 101, 102, and 103 may be some existing hardware or software devices of tenant A, tenant B, and tenant C, such as servers, routers, switches, hubs, desktop computers, notebooks, printers, handheld devices, system software or software modules. The tenant network edge devices 104, 105, and 106 and the edge router 107 may refer to switches, routers, routing switches, integrated access devices, etc. installed on an edge network. Generally, the edge network includes the last segment of network connected to tenant A, tenant B, and tenant C. The cloud gateway 108 may be a mainframe computer, a server, etc., and may realize the network interconnection between the infrastructure 101, 102, and 103 of tenant A, tenant B, and tenant C and the cloud resources provided by cloud service provider D.
It should be noted that the network access method for an edge router provided by embodiments of the present disclosure may be performed by the edge router 107. Accordingly, a network access apparatus for an edge router may also be provided in the edge router 107. The network access method for an edge router provided by the embodiments of the present disclosure may also be performed by a plurality pieces of software or a plurality of software modules, which is not limited herein.
It should be understood that the number of tenants, infrastructures, tenant network edge devices, edge routers, cloud gateways, and cloud service providers in
With further reference to
Step 201, receiving a first request message sent by a first tenant network edge device in the at least one tenant network edge device.
In the present embodiment, an executing body of the network access method for an edge router (for example, the edge router 107 as shown in
Step 202, acquiring a first request identifier corresponding to the first tenant network edge device based on port information of a port connected to the first tenant network edge device.
In the present embodiment, the executing body usually has a certain number of physical ports for communication connection with other devices. The executing body may acquire the first request identifier corresponding to the first tenant network edge device based on the port information of the port connected to the first tenant network edge device. The port information may be a port number, or a port identifier pre-designated by a cloud service provider or those skilled in the art. Each port generally has different port information. The first request identifier is used to identify the first tenant network edge device. The first request identifier may be an identifier preset by the cloud service provider or those skilled in the art that may identify the first tenant network edge device. The first request identifier may alternatively be an identifier generated by using a predetermined rule that may identify the first tenant network edge device. Alternatively, the executing body may store a corresponding relationship table between the first tenant network edge device and the first request identifier, so as to identify the first network edge device based on the port information of the port connected to the first tenant network edge device, then, the first request identifier corresponding to the first tenant network edge device may be found according to the corresponding relationship table. Alternatively, after identifying the first network edge device based on the port information of the port connected to the first tenant network edge device, the executing body may also send a request to its cloud service provider or other devices (such as the cloud gateway 108 as shown in
Step 203, adding the first request identifier to the first request message to generate a processed first request message.
In the present embodiment, the executing body may add the first request identifier to the received first request message to generate the processed first request message. Generally, the first request identifier may be added to the beginning part of the first request message. For example, for the first request message containing two parts: request header and request body, the first request identifier may be added to the request header part, or the first request identifier may be added before the request header.
Step 204, forwarding the processed first request message to the cloud gateway, based on a stored routing table.
In the present embodiment, the executing body may forward the processed first request message generated in step 203 based on the stored routing table. The routing table usually refers to a stored routing information table, storing a path to a predetermined network terminal. The routing table may be a fixed routing manually configured in the router by those skilled in the art or a manager, that is, a static routing table. The routing table may alternatively be a routing table automatically established by a dynamic routing protocol using such as a link state algorithm, a distance vector algorithm, or a Dijkstra algorithm, that is, a dynamic routing table. The executing body may also create a corresponding VRF (virtual routing forwarding) for the first tenant network edge device, and store the corresponding relationship between the first tenant network edge device and its corresponding VRF. The routing table corresponding to the first tenant network edge device is stored in the VRF corresponding to the first tenant network edge device. The executing body may search for the VRF corresponding to the first tenant network edge device, then search for the routing table from the VRF, and forward the processed first request message to the cloud gateway.
With further reference to
The network access method for an edge router provided by the above embodiment of the present disclosure, by identifying a connection port with the first tenant network edge device, acquiring the first request identifier corresponding to the first tenant network edge device and adding a first identifier to the first request message sent by the first tenant network edge device, and then forwarding the processed first request message to the cloud gateway, thus network connection between the first tenant network edge device and the cloud gateway is realized, and the port information of the port connected to the edge router is used in the data transmission process. The first request identifier enables the edge router to identify the first tenant network edge device, thereby helping to realize isolation and safety of the data transmission process of the first tenant network edge device.
With further reference to
Step 401, receiving a first request message sent by a first tenant network edge device in the at least one tenant network edge device.
Step 402, acquiring a first request identifier corresponding to the first tenant network edge device based on port information of a port connected to the first tenant network edge device.
Step 403, adding the first request identifier to the first request message to generate a processed first request message.
Step 404, forwarding the processed first request message to the cloud gateway, based on a stored routing table.
For the specific processing and the technical effects thereof of the above steps 401, 402, 403 and 404, reference may be made to the relevant descriptions of the steps 201, 202, 203 and 204 in the corresponding embodiment of
Step 405, receiving a first response message sent by the cloud gateway in response to the first request message.
In the present embodiment, the executing body may receive the first response message sent by the cloud gateway (such as the cloud gateway 108 as shown in
Step 406, removing the first response identifier for the first response message to generate a processed first response message.
In the present embodiment, the executing body may remove the first response identifier for the received first response message, to generate the processed first message. Generally, the first response identifier may occupy several data bits in the first response message, then these data bits may be deleted or the data values on these data bits may be replaced with other preset default data values, so that there is no longer the first response identifier in the first response message.
Step 407, forwarding the processed first response message to the first tenant network edge device, based on the port information.
In the present embodiment, the executing body may acquire the port information of the port corresponding to the first tenant network edge device, and then forward the processed first response message generated in the step 406 to the first tenant network edge device through the port corresponding to the first tenant network edge device.
With further reference to
It can be seen from
With further reference to
Tenants E, F, G, H and I may rent cloud resources provided by cloud service provider J. Tenants E, F, G, H and I may be individuals, enterprises, colleges, government departments, hotels, or other telecommunications operators. Cloud service provider J may provide tenants E, F, G, H and I with various hardware, software and other system resources.
The infrastructure 701, 702, 703, 709, 710 may be some existing hardware or software devices of tenants E, F, G, H and I, such as servers, routers, switches, hubs, desktop computers, notebooks, printers, handheld devices, system software or software modules. The tenant network edge devices 704, 705, 706, 711, and 712, the access switch 713 and the edge router 707 may refer to switches, routers, routing switches, integrated access devices, etc. installed on an edge network. Generally, the edge network includes the last segment of network connected to tenants E, F, G, H and I. The cloud gateway 708 may be a mainframe computer, a server, etc., and may realize the network interconnection between the infrastructures 701, 702, 703, 709, and 710 of tenants E, F, G, H and I and the cloud resources provided by cloud service provider D.
It should be understood that the number of tenants, infrastructures, tenant network edge devices, access switches, edge routers, cloud gateways, and cloud service providers in
In the flow 600 of the network access method for an edge router, the edge router is in communication connection with an access switch, and the access switch is in communication connection with a second tenant network edge device of the at least one tenant network edge device. The method includes the following steps.
Step 601, receiving an intermediate a message sent by the access switch.
In the present embodiment, an executing body (for example, the edge router 707 as shown in
In practice, the access switch has a certain number of physical ports for communication connection with other devices. The access switch may acquire the second tenant identifier corresponding to the second tenant network edge device based on the port information of the port connected to the second tenant network edge device. The port information may be a port number, or a port identifier pre-designated by a cloud service provider or those skilled in the art. Each port generally has different port information. The second tenant identifier may be an identifier preset by the cloud service provider or those skilled in the art that may identify the second tenant network edge device. The second tenant identifier may alternatively be an identifier generated by using a predetermined rule that may identify the second tenant network edge device. Alternatively, the access switch may store a corresponding relationship table between the second tenant network edge device and the second request identifier, so as to identify the second network edge device based on the port information of the port connected to the second tenant network edge device, then, the second request identifier corresponding to the second tenant network edge device may be found according to the corresponding relationship table. Alternatively, after identifying the second network edge device based on the port information of the port connected to the second tenant network edge device, the access switch may also send a request to its cloud service provider or other devices (such as the edge router 707, the cloud gateway 708 as shown in
Step 602, acquiring a second request identifier corresponding to the second tenant network edge device based on the second tenant identifier.
In the present embodiment, the executing body may acquire the second request identifier corresponding to the second tenant network edge device based on the second tenant identifier in the intermediate message. The second request identifier may be an identifier preset by the cloud service provider or those skilled in the art that may identify the second tenant network edge device. The second request identifier may alternatively be an identifier generated by using a predetermined rule that may identify the second tenant network edge device. Alternatively, the edge router may store a corresponding relationship table of the second tenant network edge device, the second tenant identifier and the second request identifier, so as to find the second request identifier corresponding to the second tenant network edge device, based on the second tenant identifier in the received intermediate message, according to the foregoing corresponding relationship table. Alternatively, the access switch may also send a request to its cloud service provider or other devices (for example, the cloud gateway 708 and the like as shown in
Step 603, adding the second request identifier to the intermediate message, and removing the second tenant identifier, to generate a processed intermediate message.
In the present embodiment, the executing body may add the second request identifier to the received intermediate message, and remove the second tenant identifier, to generate the processed intermediate message. Generally, the second request identifier may be added to the beginning part of the intermediate message. For example, for the second request message containing two parts: request header and request body, the second request identifier may be added to the request header part, or the second request identifier may be added before the request header. The second tenant identifier may occupy several data bits in the intermediate message, then these data bits may be deleted or the data values on these data bits may be replaced with other preset default data values, so that there is no longer the second tenant identifier in the intermediate message.
Step 604, forwarding the processed intermediate message to the cloud gateway, based on the routing table.
In the present embodiment, the executing body may forward the processed intermediate message generated in the step 603 to the cloud gateway, based on the routing table. The routing table usually refers to a stored routing information table, storing a path to a predetermined network terminal. The routing table may be a fixed routing manually configured in the router by those skilled in the art or a manager, that is, a static routing table. The routing table may alternatively be a routing table automatically established by a dynamic routing protocol using such as a link state algorithm, a distance vector algorithm, or a Dijkstra algorithm, that is, a dynamic routing table. The executing body may also create a corresponding VRF (virtual routing forwarding) for the second tenant network edge device, and store the corresponding relationship between the second tenant network edge device and its corresponding VRF. The routing table corresponding to the second tenant network edge device is stored in the VRF corresponding to the second tenant network edge device. The executing body may search for the VRF corresponding to the second tenant network edge device, then search for the routing table from the VRF, and forward the processed second request message.
Step 605, receiving a second response message sent by the cloud gateway in response to the second request message.
In the present embodiment, the executing body may receive the second response message sent by the cloud gateway (such as the cloud gateway 708 as shown in
Step 606, acquiring the second tenant identifier corresponding to the second tenant network edge device based on the second response identifier.
In the present embodiment, the executing body may acquire the second tenant identifier corresponding to the second tenant network edge device based on the second response identifier in the received second response message. Alternatively, the executing body may store a corresponding relationship table between the second response identifier and the second tenant identifier, so that, based on the second response identifier, the second tenant identifier corresponding to the second response identifier may be found according to the above corresponding relationship table. Alternatively, the executing body may also send a request to its cloud service provider or other devices (such as the access switch 713, the cloud gateway 708 as shown in
Step 607, removing the second response identifier for the second response message, adding the second tenant identifier, to generate a processed second response message.
In the present embodiment, the executing body may remove the second response identifier for the received second response message, add the second tenant identifier, to generate the processed second response message. Generally, the second response identifier may occupy several data bits in the second response message, then these data bits may be deleted or the data values on these data bits may be replaced with other preset default data values, so that there is no longer the second response identifier in the second response message. The executing body may also add the second tenant identifier to the beginning part of the second response message. For example, for the second response message containing two parts: request header and request body, the second tenant identifier may be added to the request header part, or the second tenant identifier may be added before the request header.
Step 608, forwarding the processed second response message to the access switch, based on the routing table.
In the present embodiment, the executing body may forward the processed second response message generated in the step 607 to the access switch, based on the stored routing table.
In practice, the access switch may acquire port information of a port corresponding to the second tenant network edge device, then remove the second tenant identifier in the processed second response message, and forward the processed second response message through the port corresponding to the second tenant network edge device to the second tenant network edge device.
With further reference to
It can be seen from
With further reference to
As shown in
In the present embodiment, in the network access apparatus 900 for an edge router: the specific processing and the technical effects thereof of the first request message receiving unit 901, the first request identifier acquisition unit 902, the first request message processing unit 903 and the first request message forwarding unit 904 may refer to the related descriptions of step 201, step 202, step 203 and step 204 in the corresponding embodiment of
In some alternative implementations of the present embodiment, the network access apparatus 900 for an edge router further includes: a first response message receiving unit (not shown in the figure), configured to receive a first response message sent by the cloud gateway in response to the first request message, where the first response message includes a first response identifier, and the first response identifier is used to identify the first tenant network edge device; a first response message processing unit (not shown in the figure), configured to remove the first response identifier for the first response message to generate a processed first response message; and a first response message forwarding unit (not shown in the figure), configured to forward the processed first response message to the first tenant network edge device, based on the port information.
In some alternative implementations of the present embodiment, the edge router is in communication connection with an access switch, and the access switch is in communication connection with a second tenant network edge device of the at least one tenant network edge device. The network access apparatus 900 for an edge router further includes: an intermediate message receiving unit (not shown in the figure), configured to receive an intermediate message sent by the access switch, where the intermediate message includes a second tenant identifier and a second request message received by the access switch from the second tenant network edge device, and the second tenant identifier is used to identify the second tenant network edge device; a second request identifier acquisition unit (not shown in the figure), configured to acquire a second request identifier corresponding to the second tenant network edge device based on the second tenant identifier; an intermediate message processing unit (not shown in the figure), configured to add the second request identifier to the intermediate message, and remove the second tenant identifier, to generate a processed intermediate message; and an intermediate message forwarding unit (not shown in the figure), configured to forward the processed intermediate message to the cloud gateway, based on the routing table.
In some alternative implementations of the present embodiment, the network access apparatus 900 for an edge router further includes: a second response message receiving unit (not shown in the figure), configured to receive a second response message sent by the cloud gateway in response to the second request message, where the second response message includes a second response identifier, and the second response identifier is used to identify the second tenant network edge device; a second tenant identifier acquisition unit (not shown in the figure), configured to acquire the second tenant identifier corresponding to the second tenant network edge device based on the second response identifier; a second response message processing unit (not shown in the figure), configured to remove the second response identifier for the second response message, and add the second tenant identifier, to generate a processed second response message; and a second response message forwarding unit (not shown in the figure), configured to forward the processed second response message to the access switch, based on the routing table.
In the edge router provided in the above embodiment of the present disclosure, the first request message receiving unit 901 receives the first request message sent by the first tenant network edge device, the first request identifier acquisition unit 902 acquires the first request identifier corresponding to the first tenant network edge device based on the port information of the port connected to the first tenant network edge device, the first request identifier being used to identify the first tenant network edge device. Then, the first request message processing unit 903 adds the first request identifier to the first request message to generate the processed first request message, then the first request message forwarding unit 904 forwards the processed first request message to the cloud gateway, based on the stored routing table, thus network connection between the first tenant network edge device and the cloud gateway is realized, and the port information of the port connected to the edge router and the first request identifier are used to enable the edge router to identify the first tenant network edge device, thereby helping to realize isolation and safety of the data transmission process of the first tenant network edge device.
With further reference to
As shown in
The following components may be connected to the I/O interface 1006: an input portion 1007 including such as a modem, an optical modem; an output portion 1008 including such as a computer, a switch; a storage portion 1009 including such as a hard disk; and a communication portion 1010 including a network interface card, such as a LAN card and a modem. The communication portion 1010 performs communication processes via a network, such as the Internet. A driver 1011 is also connected to the I/O interface 1006 as required.
In particular, according to the embodiments of the present disclosure, the process described above with reference to the flow chart may be implemented in a computer software program. For example, an embodiment of the present disclosure includes a computer program product, which includes a computer program that is tangibly embedded in a computer-readable medium. The computer program includes program codes for performing the method as illustrated in the flow chart. In such an embodiment, the computer program may be downloaded and installed from a network via the communication portion 1010. The computer program, when executed by the central processing unit (CPU) 1001, implements the above mentioned functionalities as defined by the method of the present disclosure.
It should be noted that in the present disclosure, in order to facilitate the description of a plurality of tenant network edge devices and information related to each tenant network edge device during data transmission, they are named as the first tenant network edge device and the second tenant network edge device. There are also names such as the first response identifier, the second response identifier, the first request identifier, the second request identifier, the second tenant identifier, the first request message, the second request message, the first response message, and the second response message. Those skilled in the art should understand that the first and second therein do not constitute a special limitation.
It should be noted that the computer readable medium in the present disclosure may be computer readable signal medium or computer readable storage medium or any combination of the above two. An example of the computer readable storage medium may include, but not limited to: electric, magnetic, optical, electromagnetic, infrared, or semiconductor systems, apparatus, elements, or a combination of any of the above. A more specific example of the computer readable storage medium may include but is not limited to: electrical connection with one or more wire, a portable computer disk, a hard disk, a random access memory (RAM), a read only memory (ROM), an erasable programmable read only memory (EPROM or flash memory), a fiber, a portable compact disk read only memory (CD-ROM), an optical memory, a magnet memory or any suitable combination of the above. In the present disclosure, the computer readable storage medium may be any physical medium containing or storing programs which may be used by a command execution system, apparatus or element or incorporated thereto. In the present disclosure, the computer readable signal medium may include data signal in the base band or propagating as parts of a carrier, in which computer readable program codes are carried. The propagating data signal may take various forms, including but not limited to: an electromagnetic signal, an optical signal or any suitable combination of the above. The signal medium that can be read by computer may be any computer readable medium except for the computer readable storage medium. The computer readable medium is capable of transmitting, propagating or transferring programs for use by, or used in combination with, a command execution system, apparatus or element. The program codes contained on the computer readable medium may be transmitted with any suitable medium including but not limited to: wireless, wired, optical cable, RE medium etc., or any suitable combination of the above.
The flow charts and block diagrams in the accompanying drawings illustrate architectures, functionalities and operations that may be implemented according to the systems, methods and computer program products of the various embodiments of the present disclosure. In this regard, each of the blocks in the flow charts or block diagrams may represent a module, a program segment, or a code portion, said module, program segment, or code portion including one or more executable instructions for implementing specified logic functionalities. It should also be noted that, in some alternative implementations, the functionalities denoted by the blocks may occur in a sequence different from the sequences shown in the accompanying drawings. For example, any two blocks presented in succession may be executed, substantially in parallel, or they may sometimes be in a reverse sequence, depending on the functionality involved. It should also be noted that each block in the block diagrams and/or flow charts as well as a combination of blocks may be implemented using a dedicated hardware-based system performing specified functionalities or operations, or by a combination of a dedicated hardware and computer instructions.
The units involved in the embodiments of the present disclosure may be implemented by means of software or hardware. The described units may also be provided in a processor, for example, may be described as: a processor including a first request message receiving unit, a first request identifier acquisition unit, a first request message processing unit and a first request message forwarding unit. Here, the names of these units do not in some cases constitute limitations to such units themselves. For example, the first request message receiving unit may also be described as “a unit configured to receive a first request message sent by a first tenant network edge device in at least one tenant network edge device”.
In another aspect, the present disclosure further provides a computer readable medium. The computer readable medium may be included in the apparatus in the above described embodiments, or a stand-alone computer readable medium not assembled into the apparatus. The computer readable medium carries one or more programs. The one or more programs, when executed by the apparatus, cause the apparatus to: the edge router being in communication connection with a cloud gateway and at least one tenant network edge device; receive a first request message sent by a first tenant network edge device in the at least one tenant network edge device; acquire a first request identifier corresponding to the first tenant network edge device based on port information of a port connected to the first tenant network edge device, the first request identifier being used to identify the first tenant network edge device; add the first request identifier to the first request message to generate a processed first request message; and forward the processed first request message to the cloud gateway, based on a stored routing table.
The above description only provides an explanation of the preferred embodiments of the present disclosure and the technical principles used. It should be appreciated by those skilled in the art that the inventive scope of the present disclosure is not limited to the technical solutions formed by the particular combinations of the above-described technical features. The inventive scope should also cover other technical solutions formed by any combinations of the above-described technical features or equivalent features thereof without departing from the concept of the present disclosure. Technical schemes formed by the above-described features being interchanged with, but not limited to, technical features with similar functionalities disclosed in the present disclosure are examples.
Patent | Priority | Assignee | Title |
11695617, | Feb 05 2020 | Nippon Telegraph and Telephone Corporation | Alarm monitoring system, alarm monitoring method, and program |
Patent | Priority | Assignee | Title |
10491715, | Jan 11 2019 | ARCHITECTURE TECHNOLOGY, INC | IP packet translation to piggyback networking information |
11218569, | Jan 11 2019 | ARCHITECTURE TECHNOLOGY CORPORATION | IP packet translation for low-overhead out-of-band data embedding |
6101549, | Sep 27 1996 | Intel Corporation | Proxy-based reservation of network resources |
8655990, | Jul 13 2005 | Alcatel Lucent | Access device routing device and method thereof supporting stateless address configuration communication network |
20030165121, | |||
20080240100, | |||
20090201988, | |||
20110075674, | |||
20140112137, | |||
20160142310, | |||
20170063674, | |||
20190036876, | |||
20200169609, | |||
20200169610, | |||
20210021688, | |||
CN101001264, | |||
CN101009635, | |||
CN101400098, | |||
CN102577270, | |||
CN103795630, | |||
CN106101023, | |||
CN1897589, | |||
EP2945322, |
Executed on | Assignor | Assignee | Conveyance | Frame | Reel | Doc |
Apr 26 2019 | Beijing Jingdong Shangke Information Technology Co., Ltd. | (assignment on the face of the patent) | / | |||
Apr 26 2019 | Beijing Jingdong Century Trading Co., Ltd. | (assignment on the face of the patent) | / | |||
Sep 10 2020 | DU, HAIFENG | BEIJING JINGDONG SHANGKE INFORMATION TECHNOLOGY CO , LTD | ASSIGNMENT OF ASSIGNORS INTEREST SEE DOCUMENT FOR DETAILS | 053928 | /0364 | |
Sep 10 2020 | DU, HAIFENG | BEIJING JINGDONG CENTURY TRADING CO , LTD | ASSIGNMENT OF ASSIGNORS INTEREST SEE DOCUMENT FOR DETAILS | 053928 | /0364 |
Date | Maintenance Fee Events |
Sep 29 2020 | BIG: Entity status set to Undiscounted (note the period is included in the code). |
Date | Maintenance Schedule |
Mar 07 2026 | 4 years fee payment window open |
Sep 07 2026 | 6 months grace period start (w surcharge) |
Mar 07 2027 | patent expiry (for year 4) |
Mar 07 2029 | 2 years to revive unintentionally abandoned end. (for year 4) |
Mar 07 2030 | 8 years fee payment window open |
Sep 07 2030 | 6 months grace period start (w surcharge) |
Mar 07 2031 | patent expiry (for year 8) |
Mar 07 2033 | 2 years to revive unintentionally abandoned end. (for year 8) |
Mar 07 2034 | 12 years fee payment window open |
Sep 07 2034 | 6 months grace period start (w surcharge) |
Mar 07 2035 | patent expiry (for year 12) |
Mar 07 2037 | 2 years to revive unintentionally abandoned end. (for year 12) |